> This page is for Home.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://developers.webflow.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.webflow.com/_mcp/server.

# Enhanced security and permissions, and new endpoints for site configuration

> Update: Added new endpoints to the Data API giving you more tools to access site configurations, and new methods to the Designer API, allowing you to determine a user's permissions and capabilities in the Webflow Designer.

In this latest release, we've rolled out some significant updates to our APIs. First up, we've strengthened security by ensuring that only Workspace Admins can manage changes to Apps. In the Data API, we've introduced new endpoints that give you greater control over `robots.txt` files and site redirects. And for those using the Designer API, you can now subscribe to alerts when users select new CMS items on collection pages, making it simpler to keep track of automatically generated page paths.

## Security & permissions

* **Enhanced Workspace App Management Permissions:**
  Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Apps now enforce stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
* **Mandatory 2FA for Workspace Admins:**
  To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.

## New endpoints

#### **Robots.txt**

* **[Replace robots.txt](/data/v2.0.0-beta/reference/enterprise/site-configuration/robots-txt/put):** Replace the `robots.txt` configuration for various user agents.
* **[Update robots.txt](/data/v2.0.0-beta/reference/enterprise/site-configuration/robots-txt/patch):** Update the `robots.txt` configuration for various user agents.
* **[Delete user-agent rules](/data/v2.0.0-beta/reference/enterprise/site-configuration/robots-txt/delete):** Remove specific rules for a user-agent in your `robots.txt` file.

#### **Site redirects**

* **[Get site redirects](/data/v2.0.0-beta/reference/enterprise/site-configuration/301-redirects/get)**: Fetch a list of all URL redirect rules configured for a specific site.
* **[Create a site redirect rule](/data/v2.0.0-beta/reference/enterprise/site-configuration/301-redirects/create):** Add a new URL redirection rule to a site.
* [**Delete site redirect rules**](/data/v2.0.0-beta/reference/enterprise/site-configuration/301-redirects/delete):  Remove URL redirection rules from a site.